Static task
static1
Behavioral task
behavioral1
Sample
14ebb143299a82b72b688da2ffe4c764f91e00baf987165e51c247a12dc9abc2.exe
Resource
win10v2004-20240319-en
General
-
Target
14ebb143299a82b72b688da2ffe4c764f91e00baf987165e51c247a12dc9abc2
-
Size
1.8MB
-
MD5
5a8b192cb87f14342024b62db8e13353
-
SHA1
05d43805d23b677dfa7768d66edfeb542dd79c44
-
SHA256
14ebb143299a82b72b688da2ffe4c764f91e00baf987165e51c247a12dc9abc2
-
SHA512
35dc85334238c477b76833e53fd1b8a39cc7de6f6ccddbedb508e067100000cedb5fa0267268699c2559213c59212449d67a3ab3034458208856eaf4b60092c2
-
SSDEEP
49152:8YRCqlyAbNTiXHxG9o/Ur6uQMuyOk72+JthLPht:ZvNgxILO56t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14ebb143299a82b72b688da2ffe4c764f91e00baf987165e51c247a12dc9abc2
Files
-
14ebb143299a82b72b688da2ffe4c764f91e00baf987165e51c247a12dc9abc2.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
koulxkgj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zbkgiies Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE